Overview

overview

10

Static

static

3

086ded6979...18.exe

windows7-x64

10

086ded6979...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    086ded6979e2f43a1bcd78d2fe298f94_JaffaCakes118

  • Size

    185KB

  • Sample

    241002-cverlssdmq

  • MD5

    086ded6979e2f43a1bcd78d2fe298f94

  • SHA1

    1248473d4e33ce5fee7c65c7f6cf2f60f155f5ae

  • SHA256

    61f6df329dd803e18913d4a928357df680f52d6d2890c3cd65537dff8219153e

  • SHA512

    c94034f502d14f5c1e5d88c2693a728f41285f092e5716002a6e20df043002b4f5ce70f00ff4db078e60f0803d1ad50ff739fe39acdb0dfc859df5247bd8ef29

  • SSDEEP

    3072:lQ+P+CmokXLW+YYl+Rt9s9eckZwZVDyLp4avT0xsIu:lQ+WCmtWK0t69Zk6ZRyLp4a74s

Score
10/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      086ded6979e2f43a1bcd78d2fe298f94_JaffaCakes118

    • Size

      185KB

    • MD5

      086ded6979e2f43a1bcd78d2fe298f94

    • SHA1

      1248473d4e33ce5fee7c65c7f6cf2f60f155f5ae

    • SHA256

      61f6df329dd803e18913d4a928357df680f52d6d2890c3cd65537dff8219153e

    • SHA512

      c94034f502d14f5c1e5d88c2693a728f41285f092e5716002a6e20df043002b4f5ce70f00ff4db078e60f0803d1ad50ff739fe39acdb0dfc859df5247bd8ef29

    • SSDEEP

      3072:lQ+P+CmokXLW+YYl+Rt9s9eckZwZVDyLp4avT0xsIu:lQ+WCmtWK0t69Zk6ZRyLp4a74s

    Score
    10/10
    discoverypersistencespywarestealerupx

    • Modifies WinLogon for persistence

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks